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DETAILED ACTION 
Response to Amendment 

1 . This action was PROSECUTION REOPENED after BPAI decision on 4/5/07, 
and application was filed on 8-29-2000. 

2. Clainns 1 - 24 are pending. Claims 1, 9, 17 have been amended. Independent 

claims are 1, 9, 17. 

Response to Arguments 

3. Applicant's arguments filed 10/9/2007 have been fully considered but they are not 
persuasive. 

3.1 Applicant argues that the referenced prior art does not disclose, "said associated 
key comprises a key that is not publicly published", (see Remarks Page 8) 

There is no disclosure for this claim limitation, (said associated key comprises a 
key that is not publicly published). See USC 112, 1^* rejection for this claim limitation 
for claims 1, 9, 17. 

3.2 Applicant argues that the referenced prior art does not disclose, "preventing 
validation of the association of the user with messages", (see Remarks Page 9) 

The claim limitation discloses preventing validation of the association between the 
user and the messages. In addition, the claim limitation discloses revoking the 
associated key. Based on the specification the associated key may be revoked by 
erasing the key. The Cook prior art discloses the capability to revoke (erase) the 
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associated key as per claim limitation. Additional functions mentioned by Applicant do 
not remove the fact that the Cook prior art discloses the claimed limitation (the capability 
to revoke the associated key). The deletion of the association key prevents attempts to 
validate the association between the user and a key. 

Applicants invention defines revoke to be the deletion of an association key pair, 
which removes an association between a user and a user's key pair thereby removing a 
user's ability to utilize a particular user's key pair, (see Specification Page 15, Lines 27- 
33: " ... Associated key A may be revoked by simply erasing it from server system 104. 
Since associated key A is revoked and no longer exists in server system 104, the ECK 
107 does not have an associated key to decrypt, and encrypted user key 1 , in turn, 
cannot be decrypted since associated key A does not exist to decrypt user key 1 .... ") 
Cook (6,732,101) also discloses the capability to revoke an association key pair by 
deleting an association encryption key pair, [see Cook col. 6, lines 48-50: key pair 
deletion]. 

3.3 The examiner has considered the applicant's remarks concerning a system, for 
managing a user key used to sign a message for a data processing system having an 
encryption chip are disclosed. In order to encrypt and send messages to a recipient, 
the messages are encrypted with the user key. The user key, in turn, is encrypted with 
an associated key. The associated key is further encrypted using an encryption chip 
key stored on the encryption chip. The encrypted messages are communicated to a 
recipient to validate an association of the user with the encrypted messages. The 
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associated key is decrypted with the encryption chip key. The user key is decrypted 
with the associated key, and the messages are decrypted with the user key. 
Thereafter, validation of the association of messages with the user is removed by 
revoking the associated key. The centralized server system with the encryption chip is 
coupled to and provides encryption services to a plurality of client systems. All data 
relating to the encrypted messages are erased from the server system after the 
encrypted messages are sent from the server system to the client system. Applicant's 
arguments have thus been fully analyzed and considered but they are not persuasive. 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Doonan (6,807,277), Cook (6,732,101), and Marshall (4,888,800) which discloses 
applicant's invention including disclosures in Remarks dated October 9, 2007. 

Claim Rejections - 35 USC §112 

4. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

5. Claims 1, 9, 17 rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
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had possession of the claimed invention. There is no specific disclosure wherein 
said associated key comprises a key that is not publicly published " 
that said associated key comprises a key that is not publicly published. This claim 
limitation has been amended to claims 1 , 9, 17. 

Claim Rejection - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which the subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1 - 4, 6 - 12, 14 - 20, 22 - 24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Doonan et al. (US Patent No. 6,807,277) in view of Cook (US 
Patent No. 6,732,101). 

Regarding Claims 1, 9, 17, Doonan discloses a network messaging system, (see 
Doonan col. 1, lines 10-12: "... present invention is directed to a secure electronic 
messaging system ... ") Doonan discloses a method, a system and program product for 
managing a user key used to sign a message for a data processing system, the method 
comprising: 

a) assigning a user key to a user and storing the user key in an encrypted data 
processing system utilized to encrypt messages; (see Doonan col. 2, lines 1-7: 
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encryption key assigned by key server for message encryption) 

b) encrypting the messages with the user key; (see Doonan col. 2, lines 7-8: 
message is encrypted) 

c) storing an associated key in the encrypting data processing system and encrypting 
the user key with the associated key to obtain an encrypted user key , wherein said 
associated key comprises a key that is not publicly published : (see Doonan col. 5, 
lines 63-67: generate an encrypted user key for transmission) 

d) the encrypting data processing system communicating at least one encrypted 
messages together with the encrypted user key to a recipient system in order to 
permit validation of an association of the user with the encrypted messages by the 
recipient system; (see Doonan col. 6, line 1: encrypted message and encrypted 
key are transmitted to recipient) 

f) computer usable media bearing the control program, (see Doonan col. 3, lines 9- 
12; col. 9, lines 33-44: software exists on computer readable medium for program 
execution) 

Doonan discloses a check on the validation of a sender's credentials, (see 
Doonan col. 5, lines 16-20: sender credentials are verified) Doonan does not 
specifically disclose revoking the associated key at the encrypting data processing 
system to prevent validation. 
However, Cook discloses: 

e) preventing validation of the association of the user with messages by revoking the 
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associated key at the encrypting data processing system so that the encrypting 
data processing system is no longer able to decrypt the encrypted user key , (see 
Cook col. 6, lines 40-50: association key deleted (revoked: see spec, page 15 
lines 27-28 "Associated key A may be revoked by simply erasing it from server 
system 104.") as per specification by software component at the user system 
software component residing (data encryption system)) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to delete (revoke) an association key and 
prevent validation of the association of the user as taught by Cook. One of ordinary 
skill in the art would be motivated to employ Cook in order to enable a flexible and 
strengthened encryption system, (see Cook col. 2, lines 33-38: "... Messages can be 
encrypted using any available encryption means at the sender and sent to a 
forwarding sen/ice. Tfie fon/varding service can forward the message to each recipient 
according to the recipient's decryption capability and preference. . . . ") 

Regarding Claims 2, 10, 18, Doonan discloses the method, system and program 
product according to Claims 1, 9, 17, further comprising: 

a) decrypting the user key with the associated key; (see Doonan col. 6, lines 1-3: 
encrypted key is decrypted) 

b) decrypting the messages with the user key. (see Doonan col. 6, lines 1-3: 
encrypted message is decrypted) 
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Regarding Claims 3, 11, 19, Doonan discloses the method, system and program 
product according to Claims 1, 9, 17, wherein: the encrypting data processing system 
further comprises a client system and a server system coupled for communication, the 
client system (see Doonan col. 3, lines 9-12: network connected client (sender) and 
server system) having a client memory device and the server system having an 
encryption chip and a server memory device: 

a) storing the user key further comprises storing the user key in the client memory 
device; (see Doonan col. 9, lines 44-47: memory area used for data and 
workspace storage) 

b) storing the associated key further comprises storing the associated key in the 
server memory device; (see Doonan col. 5, lines 4-5: key is stored at server 
system database) 

Doonan discloses a check on the validation of a sender's credentials, (see 
Doonan col. 5, lines 16-20: sender credentials are verified) Doonan does not 
specifically disclose preventing validation of messages associated with the user by 
eliminating the associated key from the server memory device. 
However, Cook discloses: 

c) preventing validation further comprises preventing validation of messages 
associated with the user by eliminating the associated key from the server memory 
device, (see Cook col. 6, lines 40-50: deletion (revocation) of association key at 
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system via software component on server system in order to prevent validation) 
It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to prevent validation of messages associated 
with the user by eliminating the associated key as taught by Cook. One of ordinary 
skill in the art would be motivated to employ Cook in order to enable a flexible and 
strengthened encryption system, (see Cook col. 2, lines 33-38) 

Regarding Claims 4, 12, 20, Doonan does not disclose a server system to receive, 
encryption and forward message. However, Cook discloses the method, system and 
program product according to Claims 3, 11, 19, wherein encrypting the messages 
further comprises: 

a) sending the messages to be encrypted from the client system to the server 
system; (see Cook col. 2, lines 19-23: send message from client to server for 
encryption) 

b) encrypting the messages using the encryption chip of the server system; (see 
Cook col. 2, lines 51-55: encrypt message) 

c) sending the encrypted messages from the server system to the client system, (see 
Cook col. 2, lines 51-55: deliver encrypted message to recipient (client) system) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to send messages, encrypt messages, and 
retrieve encrypted messages as taught by Cook. One of ordinary skill in the art would 
be motivated to employ Cook in order to enable a flexible and strengthened encryption 
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system, (see Cook col. 2, lines 33-38) 

Regarding Claims 6, 14, 22, Doonan discloses the method, system and program 
product according to Claims 1 , 9, 17, further comprising: encrypting the associated key 
by using an encryption chip key which is stored on an encryption chip of the encrypting 
data processing system, (see Doonan col. 2, lines 3-8: encryption key transferred to 
sender system) 

Regarding Claims 7, 15, 23, Doonan discloses the method, system and program 
product according to Claims 6, 14, 22, further comprising: 

communicating an encrypted associated key to validate the association of the user with 
the encrypted messages, (see Doonan col. 5, lines 63-67: ) 

Regarding Claims 8, 16, 24, Doonan discloses the method, system and program 
product according to Claims 7, 15, 23, further comprising: decrypting the associated key 
with the encryption chip key. (see Doonan col. 6, lines 1-3) 

8. Claims 5, 13, 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Doonan-Cook and further in view of Marshall (US Patent No. 4,888,800). 

Regarding Claims 5, 13, 21, Doonan-Cook does not disclose the ability to erase key 
information after processing of an encrypt message. However, Marshall discloses the 
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method, system and program product according to Claims 4, 12, 20, further comprising: 
erasing from the server system all data relating to the encrypted messages after the 
encrypted messages are sent from the server system to the client system, (see Marshall 
col. 2, lines 30-35: key information is erased from system) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan-Cook to erase all key related information after 
message processing maintaining only current information as taught by Marshall. One of 
ordinary skill in the art would be motivated to employ Marshall in order to enable a 
flexible and strengthened network key management system, (see Marshall col. 1, lines 
50-58: "... system has the advantage ... only to maintain the keys required for whatever 
current communication sessions ... a pair of session keys ... every time a link or 
session is requested . . . ") 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 



Application/Control Number: Page 12 

09/651,548 . 
Art Unit: 2143 



the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kyung H. Shin whose telephone number is (571) 272- 
3920. The examiner can normally be reached on 9:30 am - 6 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David A. Wiley can be reached on (571) 272-3923. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

KH S 

Kyung Hye Shin 
Patent Examiner 
Art Unit 2143 

KHS 

December 20, 2007 
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